Implement updated auth rules from MSC2260.