authentication for snapshots