AuthN is hard and generic, authZ is easy and specific. Offload authN, and keep your users table in your Hetzner.