The Identity instance owns the auth token. Why don't we hold onto that instead of the auth token?

More to the point, I'd like the compute service (and other services) not to need to know any of the inner details of auth. Extracting the auth token into compute means compute now knows some details about auth that it probably shouldn't.