test: share empty well-known auth layer