added "refuse to update" to auth_mode