Handoff Tokens

Credential authority is running. All access is via the API.