call by name arguments for authenticator initialization