AUTH_OFF is imo potentially misleading since it might lead users to think authentication is disabled/not required for the item in question. Otoh AUTH_NONE that currently represents the opposite end of the scale is imo slightly misleading just the same ("Authentication required: none" vs "Users that can use this feature: none").
But generally I like the concept.
