it was done to remove all details of the authentication procedure
from both protocol and kernel.  see /sys/doc/auth.ps for more
information.