I like it, but we'd need to find a new way to do auth (and then prevent that from being used for non-auth-related tracking)