allow ping, stop and cancel with auth