yes this is already implemented in replicatr but it only applies to the websocket that the DM is running on, any others opened by the client don't see the authentication
auth is per socket connection, once you disconnect, or open another one, you have to make another auth