master: sync noauth with default