Hush www-authenticate header on key authentication (refs GH-1219)