Keep track of authentication candidates, breaks unit tests