Is this really the *only* thing we have to do to support multiple auth per connection? Or everything for auth-spec (besides kerberos)?