Note I left this in for now to ease code review also.  If you want to use a REST client to try the PUT, try it once, which will fail, then copy the printed string into the `Authorization` HTTP header, then it should succeed.

This will be removed before merging.