document auth_opt_backends