espra/db: rework some of the auth-related datastore models.