because auth-4.4 derived version numbers on master are confusing