I don't see how a user obtains access to any server, let along an SPSserver, if they can't authenticate somehow at the server or at a trustedsource.