After #2333 0 We now use the v2 error scope APISecurityException for auth errors.
But we have integration tests for these in 4 or 5 different classes in different packages.
This task is to put them all in one class or one package so we can cleanly see all exercising of the auth code.
