add: allows server-to-server authentication