migration: add Ambient Auth entries.