Tagged hybrid-authentication