Validate peer-level authentication state

[backkem]

We intend to track a peer's authentication state per peer level, not per origin. The rationale is to not require the user to undergo authentication multiple times between the same peers. This design needs to be validated by security and privacy considerations.

This was briefly discussed in #23.