clone: do not include authentication data in guessed dir