only support encrypted auth