added experimental auth control editable flag