with user authentication or key authentication