What is the best way to implement authentication macro and separate validation schemas?

[mrReiha]

I want to implement a system which has use either of these strategies:

1. There is a api-key header. Alongside this, we need to specify a custom userId in body as well for requests to be valid.
2. There is a jwt token ( Authorization header ), this is valid too.

Questions

1. Can I use .guard() for a macro? I want to make sure any endpoint using a macro has proper validation.
2. Is there any performance benefit to use schema validation, next to .beforeHandle method? or should I put my logic into beforeHandle only and forget the schema validation?