probably we need to treat LWT messages like expiry or dlq processing. Where it is mediated by the broker.

the message publish to the broker will use the connection auth, but the send of the lwt message after the publisher has disconnected cannot use the connection auth, it has disconnected!