Given Apache httpd's tendency to change the Authn/Authz every major release, I think we might be safer with `==` ;)