built-in: authentication, key setting