Pass on TOX backend

- now the basic security is done (admin / not admin).
- message splitting too
- bootstrapping is configurable