Is there an event kind that specifies how nostr clients should deal with AUTH? I'm thinking a whitelist of some kind. Also settings for whether to auth automatically, only when getting an auth-required, or nover.