warn about enabled, but not used auth plugins