With recent bluez versions (5.83 here), hciconfig is deprecated, and the approach to disable authentication is now: bluetoothctl agent NoInputNoOutput
hciconfig
bluetoothctl agent NoInputNoOutput