more implicit provider target settings
    
    If auth_provider or access_provider is ont set explicitly id_provider is
    used if it can handle auth or access control requests respectively. If
    not auth defaults to 'none' and the access_provider is set to 'permit'.
    
    The option 'deny' is added for the access_provider to explicitly deny
    access.