Understanding authentication permissions and throttling