Comment 6 for bug 1817645

But the quick summary:

- I like this.
- I expect it to be reasonably performant; if it gets heavily used, spinning up an Apache instance just for managing patron auth is an option for an EG admin
- Does adding a per-user opt-in/out mechanism make any sense?
- I suggest adding an Angular admin interface for config.remote_auth
- I suggest defining and using a new user activity type.