NG auth: internal db auth, RT#21563