The tool seems to be covering three different things: auth, missing info and preference - and they should not share one timeout policy and all of that.