Add OpenDAP link that requires sign-in to the hints section.
Force user to log-in when they are unathenticated and try a boxfill.
First try at forcing CURL to send the specified SSL proxy cert.