auth-spec 2.0.0 — auth-hardening release