move safeword from auth to listener