generalized cloud_auth