Make it clearer when a command/sub-command requires auth, doesn't require auth, or optionally requires auth.