I guess we don't want to generalize authenticator into a general handler?