PassiveAuth forced if not credentials