def AddAuthFieldMask(unused_ref, args, request):
  """Adds auth-specific fieldmask entries."""
  if args.auth_type is None:  # Not set, not the 'none' choice
    return request

  if request.updateMask:
    request.updateMask += ',authentication'
  else:
    request.updateMask = 'authentication'

  return request