Merge "auth: do not wtf on IllegalArgumentException" into sc-dev