s11 and more appropriate auth