Hmm. I think it would be quite simple to build an authentication proxy/firewall based on this without having to know the exact underlying message. Maybe taggin

Hmm. I think it would be quite simple to build an authentication proxy/firewall based on this without having to know the exact underlying message. Maybe tagging fields with auth_userid and/or auth_token.