account-health-watcher — authorized trigger required.