CTL doesn't really support Auto as an auth method, but we can fake it.

At some point we'll need to rejigger this to stop pretending to be istgt.