overlay nssov and pass-through authentication