.netrc settings shouldn't blow away explicit auth settings on a session