"Auth hasn't been implemented yet, so you should only use it in trusted environments (not on publicly accessible networks) for now."
https://github.com/purpleidea/mgmt/blob/master/docs/faq.md#i...
Kind of a non-starter for my use case. I hope they get to a 1.0 release soon.