The "Alternatives to consider" list is missing mTLS certificate authentication, which really should be considered more often.