I think it might be more consistent if this were to be called `authenticationStrategy`