Shared protocol/auth transport types. Live authorization scope rules are owned by weft-server/src/access/scope.rs.