of multiple users (the remoteStorage of &lt;group&gt; at &lt;host&gt;).

    If &lt;auth-dialog&gt; is null, the client will not have a way to obtain
    an access token, and SHOULD send all requests without Authorization
    header, and rely on Kerberos [<a href="#ref-KERBEROS">KERBEROS</a>] instead for requests that
    would normally be sent with a bearer token, but servers SHOULD NOT
    impose any such access barriers for resources that would normally
    not require an access token.

    The &#39;...&