auth is on shared object