[client] pubkey auth