Implement handshake prototype behind a feature flag

These can be removed, right? Since only the /account front-end should have access to this?