A1.2: The protocol allows for an authentication and authorisation procedure where necessary ()