wrote expected 'auth' envelope client key