s11 badge, more appropriate auth