Require Decoy auth on staging always