this is not going to be so simple -- I would need a callback "changed_auth_state(ip)" to clear the client flows. I guess I just need to edit rest.py, right?