use stderr for auth-client errors

Fixes regression (and failing self-tests) from before get-machine was merged