Jason, I am big fan of oidc and have written two Ruby gems using Omniauth and two OIDC providers in the science community (ORCID and Globus). Agree that security should almost never be premium feature.