If a user authenticates, and they has previously authenticated with another factor, the authorities from the first authentication should propagate to the second authentication.