This format for the file can be generated automatically using something like:

  nix-prefetch-github \
    --nix \
    --rev $(git rev-parse HEAD) \
    PrivateStorageio ZKAPAuthorizer > /path/to/zkapauthorizer-repo.nix

run in in a checkout of ZKAPAuthorizer

Let us pick Ristretto and supply a key if we like.

also if get-passes fails dump the tahoe logs

it needs the plugin too

only useful for debugging failed test runs

at least, maybe.  we don't actually get any zkaps from this as of now.

Put it into a language that I can more easily maintain

The issuer runs.  Helpers to poke the right API calls into the right place
forthcoming...

just need 35 more hosts and then defining the function will be a win ...

Also improve failure reporting.

It knows better than we do about its own dependencies.  Let it control them.

Also open the firewall!  Yea.  That is a pretty important thing.

This results in less repetition, less abstraction leakage, and provides more
power to the private-storage module (by exposing meaningful values instead of
Tahoe-LAFS config strings).

Also, comments.