consent-based verification