I just head-scratched my way though something similar.
Wanted to configure something along the lines of “use auth always” (running outbound only)
Are you by chance injecting form one of the relay_hosts?
From testing I found that Kumo will simply pass auth if injecting from a relay_host, even if you add auth requirement for relaying in your listener_domains.toml for all domains