Totally agree that user should be the default, if for nothing else than backwards compatibility. However, if I setup my `ldap.yml` config to use `external_system` authentication I expect it to be honored unless I override it at the command line. Does that make sense?