Honestly, I think I'd rather just have external auth always in `INSTALLED_APPS`, especially since there are separate feature flags for each kind of auth provider (although it might be nice to have that just be a list of auth providers instead of single flags).