so the default value for the param should be AUTH instead of AUTHPRIV