make sure we don't use pubkey if Rex is instructed to use passauth