Yes, that is exactly the real problem, and that problem lies in core code, not the authentication module. I'm not sure if I can get an operational solution - our Labkey is under University operations and is FISMA compliant and what I can get out of our IT is never certain.