authorize checks for ClientFlag; ordering Messages