Since MutableAuthentication uses a LinkedHashMap to hold successful authentications, the net effect would be to record the _last_ successful authentication. While that's at least deterministic, it may not be desirable in some cases. Deployers may want to record the first successful authentication or record them all. I think this highlights that many aspects of high-level multi-factor authentication behavior have not been worked out. I'm open to recommendations for alternative behavior.