ReadonlyauthThe identity's hmac.… and at.… tokens, in the app's order.
Optional ReadonlyhmacThe hmac_ttl.<issued>.<token> token the server issued the identity, as the
device holds it (the expiry is kept but not acted on: spec/). The batch and the identity request carry it after the other
tokens; the identity of a checksum entry never does.
ReadonlykindReadonlyuser
The signed-in account: its tokens and viewer (its checksums are PigeonChecksumIdentity's).