We should really extract this into a different data structure (`AuthMethod`), but I'll create an issue for this.