the attribute is _auth  because that is the literal key that is getting added to the .npmrc file