Ship auth tarballs as tar.bz2, just like recursor

Fixes #1480