While there is an authenticationEnabled variable in the southbound, it is hardcoded to true. On top of that, even if set to false, it wouldn't work, the code doesn't properly handles that.