Authentication provider is intentionally deferred in architecture decisions.