pubkey auth not mandatory anymore