in get_auth_cred, record type is 'authority' not 'sa'