diff --git a/pkg/client/config.go b/pkg/client/config.go
index <HASH>..<HASH> 100644
--- a/pkg/client/config.go
+++ b/pkg/client/config.go
@@ -90,6 +90,13 @@ func blobServerOrDie() string {
 
 func (c *Client) SetupAuth() error {
 	configOnce.Do(parseConfig)
+	if flagServer != nil && *flagServer != "" {
+		// If using an explicit blobserver, don't use auth
+		// configured from the config file, so we don't send
+		// our password to a friend's blobserver.
+		c.authMode = auth.None{}
+		return nil
+	}
 	return c.SetupAuthFromConfig(config)
 }
pkg/client: don't use config file auth when using an explicit server

Change-Id: I<I>e<I>adf4fed<I>deb3ec5a2ee<I>f4fc3a<I>fe