Use the new exposure of the authenticated remote estate from raet

to allow for the minion id to be validated, no spoofing!