More message auth checks (for  responses)