I'm going to need some guidance on this. I struggled deciding where to put it. If you leave it where it is, as you point out there is some config logic that belongs in the config module. If you move it to the config module, then there is authentication logic (see the `#applySessionFixationProtection()` implementations) that doesn't belong in the config module and instead belongs here.

So, how do you want me to change this? Do you want me to move all of the authentication logic to the config module? That hardly makes sense. The two config-related methods in this enum, IMO, only _support_ configuration of this feature. But the feature itself is much more significant that its mere support for namespace configuration.