Controlling with Auth-Type a client must use