The big change here is that `authentication_and_authorization` has been
rolled into `system_access`.