separate authentication for override creation