Prevent users from accessing irrelevant kind4 events. AUTH is not required to query general events. The client can authenticate when it needs to retrieve kind4 events.