Running mobilcoind in watcher mode

I am trying to run mobilcoind in watcher mode using the following command:

./target/release/mobilecoind     --ledger-db ledger/     --mobilecoind-db mobilecoind-db --watcher-db watcher-db    --poll-interval 10     --peer mc://node1.prod.mobilecoinww.com/     --peer mc://node2.prod.mobilecoinww.com/     --tx-source-url https://ledger.mobilecoinww.com/node1.prod.mobilecoinww.com/     --tx-source-url https://ledger.mobilecoinww.com/node2.prod.mobilecoinww.com/     --listen-uri insecure-mobilecoind://127.0.0.1:4444/

based on the MAINNET README.

I generated the sample ledger which is being passed to --ledger-db.

The binary starts successfully but the according to the output, it seems like mobilecoind is not able to download the blocks from the peers.

2021-05-21 12:57:07.988016731 UTC INFO mobilecoind started: { "GIT_COMMIT": "7973273-modified", "PROFILE": "release", "DEBUG": "false", "OPT_LEVEL": "3", "DEBUG_ASSERTIONS": "false", "TARGET_ARCH": "x86_64", "TARGET_OS": "linux", "TARGET_FEATURE": "cmpxchg16b,fxsr,sse,sse2,sse3", "RUSTFLAGS": "?", "SGX_MODE": "HW", "IAS_MODE": "PROD" }, mc.app:
 mobilecoind, mc.module: mc_common::logger::loggers, mc.src: common/src/logger/loggers/mod.rs:246                                                                            2021-05-21 12:57:08.006884974 UTC INFO Ledger db is currently at version: MetadataVersion { database_format_version: 20200707, created_by_crate_version: "1.0.1-pre1", _s: Le
dgerDbMetadataStoreSettings }, mc.app: mobilecoind, mc.module: mc_ledger_db, mc.src: ledger/db/src/lib.rs:342
2021-05-21 12:57:08.007950538 UTC INFO Ledger DB "ledger/" opened: num_blocks=1 num_txos=1000, mc.app: mobilecoind, mc.module: mobilecoind, mc.src: mobilecoind/src/bin/main.
rs:164                          
2021-05-21 12:57:08.008740750 UTC INFO Launching watcher., mc.app: mobilecoind, mc.module: mobilecoind, mc.src: mobilecoind/src/bin/main.rs:74
2021-05-21 12:57:08.008807797 UTC INFO Opening watcher db at "watcher-db"., mc.app: mobilecoind, mc.module: mobilecoind, mc.src: mobilecoind/src/bin/main.rs:76
2021-05-21 12:57:08.009994802 UTC INFO Watcher db is currently at version: MetadataVersion { database_format_version: 20210127, created_by_crate_version: "1.0.1-pre1", _s: W
atcherDbMetadataStoreSettings }, mc.app: mobilecoind, mc.module: mc_watcher::watcher_db, mc.src: watcher/src/watcher_db.rs:162
2021-05-21 12:57:08.010786222 UTC INFO Watcher DB "watcher-db" opened, sync status = {Url { scheme: "https", cannot_be_a_base: false, username: "", password: None, host: Som
e(Domain("ledger.mobilecoinww.com")), port: None, path: "/node2.prod.mobilecoinww.com/", query: None, fragment: None }: Some(0), Url { scheme: "https", cannot_be_a_base: fal
se, username: "", password: None, host: Some(Domain("ledger.mobilecoinww.com")), port: None, path: "/node1.prod.mobilecoinww.com/", query: None, fragment: None }: Some(0)}, 
mc.app: mobilecoind, mc.module: mc_watcher::watcher_db, mc.src: watcher/src/watcher_db.rs:1017
2021-05-21 12:57:08.010868068 UTC INFO Starting watcher sync thread from mobilecoind., mc.app: mobilecoind, mc.module: mobilecoind, mc.src: mobilecoind/src/bin/main.rs:88
2021-05-21 12:57:08.034395714 UTC INFO Launching mobilecoind API services, mc.app: mobilecoind, mc.module: mobilecoind, mc.src: mobilecoind/src/bin/main.rs:108
2021-05-21 12:57:08.035174188 UTC INFO Mobilecoind db is currently at version: MetadataVersion { database_format_version: 20200805, created_by_crate_version: "1.0.1-pre1", _
s: MobilecoindDbMetadataStoreSettings }, mc.app: mobilecoind, mc.module: mc_mobilecoind::database, mc.src: mobilecoind/src/database.rs:87
2021-05-21 12:57:08.036543580 UTC INFO Starting mobilecoind sync task thread, mc.app: mobilecoind, mc.module: mc_mobilecoind::service, mc.src: mobilecoind/src/service.rs:78
2021-05-21 12:57:08.040969278 UTC INFO Starting mobilecoind API Service on insecure-mobilecoind://127.0.0.1:4444/, mc.app: mobilecoind, mc.module: mc_mobilecoind::service, m
c.src: mobilecoind/src/service.rs:134
2021-05-21 12:57:08.254419506 UTC WARN Failed to retrieve blocks from mc://node1.prod.mobilecoinww.com:443/: InvalidBlockId, mc.app: mobilecoind, mc.module: mc_ledger_sync::
ledger_sync::ledger_sync_service, mc.src: ledger/sync/src/ledger_sync/ledger_sync_service.rs:399
2021-05-21 12:57:08.255772157 UTC WARN Failed to retrieve blocks from mc://node2.prod.mobilecoinww.com:443/: InvalidBlockId, mc.app: mobilecoind, mc.module: mc_ledger_sync::
ledger_sync::ledger_sync_service, mc.src: ledger/sync/src/ledger_sync/ledger_sync_service.rs:399
2021-05-21 12:57:08.255851270 UTC ERRO Attempt ledger sync failed: No potentially safe blocks., mc.app: mobilecoind, mc.module: mc_ledger_sync::ledger_sync::ledger_sync_serv
ice_thread, mc.src: ledger/sync/src/ledger_sync/ledger_sync_service_thread.rs:138

The ERROR and WARN messages are repetitive.

Is this a problem with the peers? If so, are there other peers I can use?

EDIT: i FOUND these trusted nodes and using some as peers which has gotten rid of the WARN messages, however, the ERR message is still the same.

....
2021-05-21 13:57:09.296296363 UTC INFO Starting mobilecoind API Service on insecure-mobilecoind://127.0.0.1:4444/, mc.app: mobilecoind, mc.module: mc_mobilecoind::service, mc.src: mobilecoind/src/service.rs:134                                                                                                                                        
2021-05-21 13:57:12.695505924 UTC INFO Archive block retrieved for Url { scheme: "https", cannot_be_a_base: false, username: "", password: None, host: Some(Domain("bd-mobilecoin-ledger.s3.amazonaws.com")), port: None, path: "/thelongnowfoundation.mobilecoin.bdnodes.net/", query: None, fragment: None } 0, mc.app: mobilecoind, mc.module: mc_watcher::watcher, mc.src: watcher/src/watcher.rs:162                                                                                                                              
2021-05-21 13:57:16.705233059 UTC ERRO Failed getting last block from mc://thelongnowfoundation.mobilecoin.bdnodes.net:8443/: Operation { error: Attestation(Grpc(RpcFailure(
RpcStatus { status: 7-PERMISSION_DENIED, details: Some("peer_auth: \"Permission denied\"") }))), total_delay: 7.15s, tries: 11 }, mc.app: mobilecoind, mc.module: mc_ledger_s
ync::network_state::polling_network_state, mc.src: ledger/sync/src/network_state/polling_network_state.rs:100
2021-05-21 13:57:16.768317786 UTC ERRO Failed getting last block from mc://blockdaemon.mobilecoin.bdnodes.net:8443/: Operation { error: Attestation(Grpc(RpcFailure(RpcStatus
 { status: 7-PERMISSION_DENIED, details: Some("peer_auth: \"Permission denied\"") }))), total_delay: 7.15s, tries: 11 }, mc.app: mobilecoind, mc.module: mc_ledger_sync::netw
ork_state::polling_network_state, mc.src: ledger/sync/src/network_state/polling_network_state.rs:100

It seems like a permission error - how does a new mobilcoin node authenticate itself?