Actually, don't need those internal auth properties. However, I think it's a mistake not to copy off the actual objects. I don't want changes to those objects to affect the primary client, hence more copies.