implement "auth if possible"