.Xauthority is found in the user's home directory, so can only be get by HOME. Looking into the initial home dir will lead to wrong results most of the time. (And even reduce security by sending out information not intended to). Bernhard R. Link