auth annotations and management