I think I'm going to change chorus to send "CLOSED: auth-required" upon ANY event needing redaction from the results. It is too complicated with various existing clients to silently redact or signal redaction, and many expect this "auth-required" signal to know they need to AUTH. For a long time I thought giving people partial results was at least a little bit helpful, now I think it is harmful.

If you think I'm wrong please stop me.