I think auth_user and auth_password would be more appropriate given that these become options in smtp_forward.ini