No matter what mechanism is employed, one of the results of the initial interaction between AIS and the Authentication Service (AS) is that the AIS must be able to subsequently verify that principals trying to register with the AIS have been authenticated.