Pull the auth sock stuff into a role.