actually, it could (should) be even easier... `nsqd` should send `"auth_required": true` as part of the `IDENTIFY` response when auth is configured.