If no user is passed in, assume the authentication is covered by the OS