Add vesting auth logic