* OIDC Authorization * Anonymous only for rooms (manual enable in room) * Validate all message on backend (if auth enabled). * Validate senders * Validate extras * Restrict user commands (mute/mute all/kick)