In bug 1580740 it became apparent that we sometimes call DeprecatedSyncResolve on the main thread. The comments state that we should always hit the cache, so this shouldn't matter, but it seems that's not the case.

In a discussion I had with Honza a while ago he said that would be quite tricky. Indeed, making the auth process async doesn't seem very straightforward.