Move identity selection based on non-standard headers into (new) identity_select plugin (#1488553)