add entrust authority check