(DOC-235) add note about global unauth and third-party auth