I think we actually ended up making auth-type just "CAPAB" for brevity.