Comment 3 for bug 427446

User configs already start with auth enabled. The system-level config is extra paranoia to make things secure by default, if a user config file is missing or broken.

See also: #438800