Principal Adding

[Klingenstein, Nate]

> It bears noting almost all of this is irrelevant now.

Yeah, the new MFA implementation is a little important.

> When I used it, I told the Password flow to "support" both PPT and
> TimeSyncToken, but depending on the request, not all of the validators ran.

Ohhhhh.  Okay.  I ran into probably the same things you did regarding the interplay between authentication request routing and everything that can happen in flows.

> which nobody needs to do anymore since the MFA flow takes care of all these
> use cases more elegantly and with less trickery.

Which use cases does the new MFA flow not satisfy that the existing implementation does?

> Run the snapshot and move on. Upgrading from snapshots to the final will be
> 99% of the time a simple install and restart. I can't promise that, but the work
> to correct anything that breaks in the next 6 weeks is dwarfed by the work to
> avoid using the features it adds.

Is there an implicit release timeframe in here?  Do nightly snapshots build unless someone says I broke it?