good question. I'm not planning to add authentication logic that can increase the complexity of the app. the reason behind suggesting to use unix domain socket is that a proxy like caddy can handle authentication & tls for wghttp as you said. I will share a simple caddyfile in readme soon.