Protocol: refactor common auth-check
-