Architecture

TODO: attach a diagram and explain how the auth system works for different packages / configurations.