A page has both a rendering condition and an authorization scheme. What is the useful distinction?

1. Conditions control contextual behavior; authorization schemes enforce permitted access
2. Neither can use server-side logic
3. Conditions always replace every authorization check
4. Authorization schemes only choose CSS classes