sharcache client: malloc() our auth secret if we have one