v0.8 dbless-auth w/o signing