Fix bug where execution can happen without authentication
manifest