RUBY-812 Validate auth credentials including extra
RUBY-812 Use service realm, otherwise host on client