To auth or not to auth