Since the supported schemes are not customizable (there will only ever be a fixed number of them), the `requestAuthenticatorFactory` should be marked as `final` and set in the constructor.

Doing this, the factory will never be `null`.