[MAESTRO-2917] support access without authentication