Split authPt getters, rework onauthfail.