Re: post-auth language for two requirements