when clustered, make sure to update clients
add commented section to describe how to add simple auth/authz