the local entity subject api requires a prefix on the subject identifier, but basic auth cant have colons in the folder name...