o Reasons for non-auth: handle most specific first.