the value must be the name
now we can have comma separated authorities in "auth" properties indicating "any" of them