limiting Authentication based on the NAS