hybrid auth for config.