How do we determine what gets returned here? Should we ensure the same hash gets returned as the old provider to be consistent? I'm not sure what requirements drive this...

Same for the other forms of auth: "auth_with_credentials_and_tenant", "auth_with_credentials"

/cc: @elight