The "apps" would have to be async loaded, based on what apps are associated the auth object (which only has their ids)...