Sign the client and auth time (like its done in the PAC) and let that be ehough for now. Add a Typed hole so that we don't break wireprotocol next time.