Now that we have the AuthRequired field, we need to add it to our specs. I feel like it should be true by default, and only add AuthRequired=false to those that we know don't need it (e.g., Chisel, Dataverse, Clowder etc);