h1. General rule[[Category: Abstract things out as much as makes sensePatterns]]
h2. =General rule: Abstract things out as much as makes sense= ==Specific rule: Abstract the living crap out of your authentication scheme.==
Look, pretty much everyone with anything worth protecting already has an auth/authZ infrastructure in place. Sometimes an extensive, perhaps multi-institutional infrastructure. One that isn’t going to be bypassed without, say, getting fired.