AuthRpc->ibuf must be 1 larger than AuthRpcMax because auth_rpc (/sys/src/libauth/auth_rpc.c:83) null-terminates the response.