lots of mess to clean up though

Passes cannot be constructed until we know how we're going to use them since
they are derived from the unblinded tokens and an operation-specific message.

Instead of never getting any passes, immediately get a pile of bogus passes!