support mechanisms that do not support mutual auth