empty client auth settings means "nobody" user