oops read this now after writing code. I sent it as `authentication_enabled` but that wording is much better.