or you use ns as auth only