The goal is to be able to name any auth_source, not necessarily the external one.

If the build approach works, by all means go for it.