the plan is

patch plume for openid connect auth
deploy it for my blag that will soon be
possibly PR plume with a big do not merge until you've verified this is not spaghetti which it probably is because i don't know rust