auth_user not needed for metasploit xml import