auth: Move <NoAuth> to a named constant