if you don't use that for authentication, then it's irrelevant