Provision one of the caller's end-customers with an ADH password credential

Authenticate every request with Authorization: Bearer <token> — a JWT or API token.