``auth`` — invalid/expired/missing token (401).
nothing calls this directly
no outgoing calls
no test coverage detected