lib/preauth: listen to first line only (use once)