Simplifies the device manager code as we don't have to duplicate the
IP/network matching logic there.

Should make the subdivision between apps (idp, sso) more obvious.

Uses the clientutil.Backend abstraction for the keystore client API.

Also add a test to verify that we're loading the config correctly.

It left the Prometheus instrumentation in server/http.go, while
it is already provided by the ai3/go-common package.

Panic on short reads and other errors.

Signs SAML assertions for users authenticated via the SSO mechanism.

Or the yaml module will become confused.

Uses 'go generate' to invoke sri.py.

Which would be the GeoLite2-Country.mmdb one.

This enables correct (hopefully) support for IPv6 lookups. Also add
support for the special "onion" zone for Tor Hidden Services.

Classic mistake with strings.Split("").

Otherwise gopkg.in/yaml.v2 won't decode strings to []bytes.

The proxy wraps endpoints (exposed as separate HTTP hosts) with single-sign-on
authentication.