That's correct, unfortunately there is no way of knowing if the update was authentication specific. Also, this way other auth providers don't all have to listen for config updates.