xio: use AuthNoneAuthorizer to fake auth buffer