Hawk auth for incoming requests only (bug 962831)