NewAuthentication creates a default Authentication.

Authentication wraps BuiltInAuthenticationOptions so we can minimize the dependencies on apiserver auth machinery, specifically by overriding the ApplyTo so we can remove those config dependencies not relevant to the subset of auth methods we enable in the proxy.