Replacing HTTP Signatures with Bearer tokens (or OCaps)?

Oh and also this thread: Would there be any interest in a "pre-authorized fetch" FEP?

Somebody needs to tie it all together…