[server] pubkey auth