updated: ensure we capture no auth cleanly.