request auth overrides stmt auth all the time now