user authentication including ingress/egress policing