It seems to imply that it's both set under :auth and under Pleroma.Web.Auth.Authenticator.
:auth
Pleroma.Web.Auth.Authenticator