WIP: opt in to authentication by default