Why is there no auth in MDP?