Auth modes that were attempted, in the order they were tried.
Which credential headers the request carried.
OptionalconfiguredNames (never values) of the keys configured for the attempted modes. Omitted for modes that don't use API keys.
OptionalmatchedSet when the rejected apikey is a configured key of kind held under
name, and mode is the attempted mode that accepts a different name.
Carries the name only, never the value.
Everything the auth pipeline knows about a failed attempt, minus anything secret. Used to build messages, hints, and
details.