option to disable plaintext auth