implemented skeleton of authenticated/override queries, currently supporting override based on trusted ranges only
added support for inverse querying sponsoring-org via override