protected abstract SourceDiagnostic ValidateAuthentication( Authentication authentication, byte[] password);