Add `AND module_auth = '' ` to allow custom values?