Incorrect types passed by end-users at runtime are not caught until our code tries to do incompatible things with those objects (e.g. .upper() on an Auth instance)

Incorrect types passed by end-users at runtime are not caught until our code tries to do incompatible things with those objects (e.g. .upper() on an Auth instance) #1147