Re: auth-reject with attributes