It would be more consistent with the existing tools to have the authconfig (or redhat-config-auth per bug #72015) command auto detect whether or not X is running and start the appropriate version (text-based or gtk-based).
It works exactly like this using system-config-authentication in the current releases.