these should be comma separated `[operator, authentication]`