Be more explicit about auth only being supported in pygit2

Also, don't let Salt use a badly-configured remote.