Be strict about what is a CIK/RID in Auth.

Also make EXORpcAuth archivable.
tentative PIK support.
Fix broken EXORpcAuth test.