Hide user actions behind a signedin check