Just for my own clarity: would the idea be that the client uses **ts** to setup their **auth_ts** header?