ensure auth_pass works and is testable