use standard object/stream format for auth object