An authentication estate is only as strong as its weakest enabled option — and disabling produces an outage with a name attached.