fix: harden remote authorization and connection lifecycle