adding `auth` for job, provider, and runner