Not OP, but the fact that the auth config (and table tracking config for that matter) is very UI-orientated is a bit of a pain point for us. Of course it all turns into a metadata json file, but:

1. It's one great big file, which makes it pretty unwieldy to maintain, other than by exporting from a Hasura instance.

2. The format doesn't seem to be very well documented. Making hand-writing changes quite difficult.

Pretty much every other piece of software we use allows us to take a code-first approach. So Hasura is a bit awkward in comparison.