Wow.   Ick.

It would have seemed to me that “the government,” no matter whose government it is, would be even more up-tight about exactly how “auth/auth” is done for their systems.   (And of course, they would make their wishes known with perfect clarity and a single sense of direction ... ;-) ... your tax dollars etc.)