Pre-RFC: Configurable authentication requirements and non-Git indices

[carols10cents]

I see you’ve opened these issues:

• Allow requiring authentication for all operations
• Allow non-Git indices

Here are some related issues with various discussions:

• Provide method of authentication for crate downloads
• auth-scheme missing from Authorization header when talking to registry