escaping auth config