If any one think that Smtp AUTH options should be in the "Distro" please vote it on this bug
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=122819
I agree with comment #5 in that thread <https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=122819#c5>.
You can put the AuthInfo entries in access. You don't need a separate file unless you need to separate them from the access table for some reason (like local users and a need for a world-readable access map). For most servers, the single file is adequate.