[SR-Users] Re: reading out "response" and "integrity-protected" from "Authorization" header field