daemon: only try-load WRT domain-control in sample config.
core: make sure authenticator backend user_data defaults to NULL.