Bumping, to note that my MFA work basically required that I just fix this directly, so I'm adding a new method to AuthenticationResult to track whether something is freshly created or not. Probably doesn't help since that will only show up in 3.3. -- Scott