_auth_and_persist_event
This is only called in two places, and the code seems much clearer without it.