sknebeland it'd be interesting to what degree they can overlap. I.e. if I support both, and a client makes an AutoAuth request, I could consider giving it a token I got via ticket auth earlier. and reverse potentially. needs some fleshing out of those APIs
