WHATNEW: the default for "ntlm auth" is "no"