Add explicit protocol module; move 'connection' stuff that's actually about auth to a module named auth