Make save_pin only mandatory for auth_type `pin`.