EmbeddedCDX: support for extensible auth tokens, exclusion at a later phase, beginning of 'fuzzy matching' support