Auth should be configurable.