mutual auth updates