Shared classes for implementing custom checkpoint auth strategies