So, having actually implemented the partial userauth approach so I could decide how painful it was, I've concluded that I don't really object to it. I'm not sure exactly where that leaves us on trying to reach consensus.