only use group auth if file exists