AuthenticationResponse::newUI currently enforces that $msgtype is either warning or error. But what if an AuthenticationProvider wants to show a new UI where the message is expected e.g. a confirmation dialog? Styling the message as a warning in that case seems unfitting. So I think it would make sense to introduce some new message type ... perhaps info, that simply displays the message without any styled box.