requestedauthncontext comparison minimum