Implemented #43 on a separate repo, forced by a two month awaiting code review of #44.
Although the build of contrib fails, the headerauth middleware has its own tests that pass: .