I'd rather not to have an ambiguous top level package called `wizard`. A top level `cmd` package containing an authwizard would be fair enough.