Authentications now include app and context from the matching right, if not both wildcarded.