Should be able to interact via API. Example interactions endpoint, webhooks, etc.

Would make adding plugins easier, and would prioritize the decoupling of core bits of functionality from the medium of interaction.

Authentication should be delegated to an oauth or SAML provider.

SPIFFE functionality is an optional stretch milestone here but not in scope for completion