guilty unless proven innocent
Disable external auth sources for now
Cover auth cases where cloud only had a fun and no mod