SubjectLocal enh
Move password package out of auth package
Move keystore package out of auth package
Get rid of separate getPrincipal/getCredential methods
Another approach to callbacks (client side only for now)