moved mnt-by auth into pending update so that it is not mandatory in both pending updates
dropped surplus interface for PendingUpdateDao
re-enabled pending updates