That's for all of you to decide :D
I like it that way because you keep the option thingy inside the option class and the option class handles the fallback stuff. And since we pass the ModuleOptions to the authservice I think that this isn't too bad