Upstream fine-grained authentication