can we change it to != AuthSourceInternal ?
this might break other plugins (e.g. ovirt) which adds external auth source