more finals, some renamings, all part of reviewing "create mntner with only sso auth"