Protect authenticators commensurate with the security category of the information to which use of the authenticator permits access.