- only allow local users (i.e. peer_id = None) to authenticate using