use mqtt auth for validating keys