My issue was that I wanted MQTT witout auth as I have so many devices in my protected environment, that it simply makes no sense to go through all devices and enable auth.
So my question was, how to enable all clients to join without authentification.
=> As I found the answer I put this here for reporting purposes for others… see the response below