buffer commands so client doesn't need to wait for authentication