Should generate no auth into lockfile
Store source authentication options in paket.dependencies only  - fixes #189