Litle: Void authorizations via an auth reversal

This changes the format of the authorization string, but the change
should be fully backwards compatible with any already stored
authorizations.

Closes #642.