Could use more checks on the auth keys.