You want to keep both in the same place anyways. (Anybody who compromises authz can now compromise authn, and vice-versa.)