Just a gut check but it feels ugly to put auth in an L3 proposal.