switch default to 'hide authentication stuff'