* turn off "secure-acquire" when --allow-unauthenticated is given