mercury gateway default to partial auth deny