but it's not immediately obvious to me what the right solution for `authentication_duration_ms` is