Authentications have their own dedicated invalidation.