better hierarchy for configuration of downloadAuth