I'm thinking that there should generally only be one trigger to reject AUTH. So AcceptReq in relayer works well enough.