requireExplicitAuthenticationStrategy