This looks extremely similar to what we proposed on telegram and it was violently rejected. I hope you can get it merged though I absolutely agree we need a header version of AUTH.