ZKAPAuthorizer

Previously an active lease on *any* share would cause us to disable lease
renewal entirely - including for newly written shares.

Now we will add a lease to any changed share that needs one, either because it
is growing or because it has no unexpired lease.