we'll use remote auth htpasswd for now
don't have to ignore failure cases, handle it in the shell