Rephrase the invirt.authz.locker._authenticate docstring for clarity.