... a request is considered authenticated if one of the following is true: The watcher ... a sender that is asserting the identity of the watcher, and: 1. the assertion ... a client supports a subset, it is possible that a user might manipulate their ...