True. But, if persona has a large and active open source community, it might be better to use that than maintain homegrown solution in the hope of &quot;security by obscurity&quot;.<p>There are some strong auth&#x2F;auth open source communities - <a href="https:&#x2F;&#x2F;github.com&#x2F;Jasig" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;Jasig</a> that serve millions of users.