Move the code auth guest API functions into a (disabled) plugin