security/authforce: fix