I think there might be. Check with the become user PR about how I communicate both the imposterId and userId to `serializeUser`. Basically the `req.user` object becomes a more complex object and the authenticators become aware of it. It should make sense in this case as well since the authenticator will know which strategy they are.