remove 'auth' as possible listen state