Ooh 👀
Yes, auth seems to be the most straight forward solution indeed.
But as the mint custodian I'd like to be as blind as possible to who is spending what, when.