In the past, a common recommendation was to set the system_auth replication factor to the number of nodes, the current recommendation seems to be 3 to 5 per data-center. We are currently configured for 3 per data-center, the lower end of that recommendation, so it may be worth considering an increase.
See also: T157354 (a cautionary tale)