Allow Basic-Auth pass-through