support authentication as an attribute