To accomodate the fact that our Apache can't do Shibboleth *and* X.509
auth on the same URL and we want both kinds of auth available for the API.