I wrote the docs under this assumption but completely forgot to actually enforce it.
* auth providers * binding rules * auth provider for kubernetes * login/logout