clarify the authenticator type