their argument against auth usually boils down to, they dont want the relay knowing anything. so they'd rather it be wide open to the entire internet so they won't have to expose their usage patterns to a relay.

btw, check the changelog of the newest version of strfry. hoyte has finally pulled his finger out to support it. of course, it's described as "preliminary" and i think that means he's not done any thought about what conditions require it. like, you know, 1059 and similar kind events, and restricting access to them to the actual recipient marked in the tag.