allow "none" auth, in case of external proxy