ca: add other authentication states