Passes cannot be constructed until we know how we're going to use them since
they are derived from the unblinded tokens and an operation-specific message.

It returns a list of Passes.  Encode them appropriately for Foolscap.

Instead of never getting any passes, immediately get a pile of bogus passes!