Caddy authentication - allow nodes with tags?

[christophershirk]

Per https://github.com/tailscale/caddy-tailscale/blob/main/auth.go#L148, func (ta Auth) Authenticate disallows any nodes with tags. I'm curious what scenarios this is intended to prevent, and whether it would be reasonable to relax this constraint and handle the security concerns through ACLs?
Thank you