ACK every command.

If we don't do this, collapsed push notifications may prevent us
from seeing all commands.
Update key for passcode information on replies.
Guard against no passcode being provided.
Send has_passcode in all replies.