The way this landed, i could promote the Auth Secret, Authorizations Expiration, and Authorizations as top level. Felt more contained to be it's own thing. perhaps `AuthState` ?