Adds prepare for request

This adds prepare_for_request, which binds a discharge macaroon to a root macaroon so that secrets aren't leaked when transmitting discharge macaroons to/from third party services.