AuthRequired has a detailed canExecute implementation built around a few authentication factors, such as whether or not the user has authenticated and whether or not the developer has provided a command to authenticate an unauthenticated user. Anything that requires auth but fails the auth.canEx() can't execute. Only when the auth.canEx() is true can the subclass begin to make additional checks.