Respect auth source when matching actions

See commit f062395