lazy checking for shock auth