[SR-Users] reading out "response" and "integrity-protected" from "Authorization" header field