auth/flat: disallow AUTH unless private IP or TLS