authenticate works only when iterating over num_groups instead of _CP_MAX_GROUPS