support connect-time authentication from clients to reduce comm overhead