DRY'd apn specs w/ authentication helper