It's pretty much the same lesson as last time: using multiple
authentication domains is confusing.