# first admin: class 1, USER/PASS applied by the image's init on EVERY start. 2026-10-12T16:23:06+00:00
## 1. authentication is required (unauthenticated RPC, want 401):
401
## 2. the generated password is accepted (want 409 = the CSRF challenge, i.e. past auth):
409
## 3. a wrong password is refused (want 401):
401
## 4. what the settings say (redacted):
    "download-dir": "/downloads/complete",
    "incomplete-dir": "/downloads/incomplete",
    "incomplete-dir-enabled": true,
    "peer-port": 51413,
    "rpc-authentication-required": true,
    "rpc-host-whitelist": "transmission.bench.local,localhost,127.0.0.1",
    "rpc-host-whitelist-enabled": true,
    "rpc-password": <redacted>
    "rpc-username": "admin",
    "rpc-whitelist": "127.0.0.1",
    "rpc-whitelist-enabled": false,
## 5. five wrong tries, then the household from the same address:
try 1: 401
try 2: 401
try 3: 401
try 4: 401
try 5: 401
household right after: 409
