Juju remote identity provider support

Juju support for handling connections from a trusted remote identity provider.

A Juju server may be configured to trust the public key identity of an identity provider. In this configuration, Juju will authenticate API connections containing an empty credential by responding with a challenge for the client to obtain proof from the remote identity service that the claimed user is logged in. The client issues a follow-up login request with this proof, which Juju accepts and grants API access as the claimed remote user.