Nip17 states: Relays SHOULD protect message metadata by only serving kind:1059 events to users p-tagged on the event (enforced using NIP-42 AUTH).
But with concord, the p-tag is ephemeral (not the stream key?), so how would you auth to download them?