docs: tokens through a proxy; token formats later

operations.md: an nginx proxy passing requests with a token on to the
node and asking the others for its own login. future-work: other token
formats.

Auth plan M2.

1 files changed, 2 insertions, 1 deletions

diff --git a/src/access/token.rs b/src/access/token.rs
index 5d82aa6..bfbce62 100644
--- a/src/access/token.rs
+++ b/src/access/token.rs
@@ -11,7 +11,8 @@
 //!
 //! Not Biscuit or UCAN (November 2026): a token only names a user, narrowing is asked
 //! of a node (which issues a narrower one), and Biscuit would bring about a hundred
-//! crates, older versions of several of ours among them (Ed25519, SHA-2, protobuf).
+//! crates, older versions of several of ours among them (Ed25519, SHA-2, protobuf):
+//! `future-work.md`, Authentication across nodes.
 
 use base64::{Engine, engine::general_purpose::URL_SAFE_NO_PAD as BASE64URL};
 use serde::{Deserialize, Serialize};