Which three statements about configuring the Cisco ACS server to perform router command authorization are true?