[SR-Users] Auth ephemeral - need some explanation