- Perhaps the auth protocol should be able to negotiate a protocol