This holds the abstract name of an auth-group for use in warning
messages. For anonymous groups associated with a target, the label
includes the target name.
Abstracting this out removes a lot of code duplication of
nearly-identical warning messages.