don't expose unauthenticated initiator identity