Decouple AuthType / ConnectionSecurity from main app