[cmac2992]

>not allowing new users to auth their app

Where does it say this? Is that in separate reporting? That would be huge.