document authn methods
add 'secret' commands