compatible with npmconf@othiym23/new-credentials
whoami talks to an endpoint with bearer auth
use setCredentialsByURI properly
normalize-package-data@0.4.0
nerfed enough