Authentication should be thread safe.