Should we rename this to `auth_options`?