conditional post-auth ???