Comment by ZnZirconium

I memorized it. I really don't want to install a client even though I wrote one. I wanted the protocol to be simpler so the lazy client would be simpler but I realize it needs to check for request forgery.

Authentication is by preshared keys and the client prompts for them or you can set environment variables. The preshared keys are static, yes.