I want to clean up Conduit auth at some point -- and maybe sooner than later -- but there are a few related changes (the SSH version, making a more cURL-able version of the API available, formalizing the non-connect version, typechecking, getting rid of differential.anonymous-access, cleaning up the way tokens cycle and we deal with out-of-range client timestmaps) that probably make sense to bundle most of together so all the testing can overlap. That should let us run more of these checks through less total code.