authentication/authorization in kernel space