Lars, you are correct. When I said subtle differences, I meant subtle differences between the way ad_maybe_redirect_for_registration works now (check cookie and redirect) and the way a more general version of it might work (e.g. check cookie; check for client cert; redirect).