We'll need a getAuthenticator() to ensure the API is consistent - even if we don't use it anywhere yet.