Explainer on authentication of queries and instructions in T2