There was a conversation on Zulip at for the need of documenting the authentication requirements on the OpenAPI specification.