investigating JMX auth