Regarding authentication as it is documented in specification, two statements:
1. Other than testing systems, FHIR servers should authenticate the clients.
2. All systems shall protect authenticator mechanisms, and select the type of credential/strength of authenticator based on use-case and risk management.
a: 1&2 True
b: 1 is True and 2 is False
c: 1 is False and 2 is True
d: 1&2 False