use authentication_keys in flash message (fix #3201)

Wondering: can't we set up auth keys per scope?