Filters check authentication, and graymail passes by design. Stopping it requires reading intent, which is what Pax does.