add DynamicUserAuthenticator for VFS access