Mark the auth events as possible outlier