Yeah, it's not that much extra work so it seems like something that should just always be done. Plus once you start messing around with any kind of authentication it seems irresponsible not to support it.