move service-dependent auth plugins to contrib repo