do not expand auth when serializing dependencies file

#257