Rotating

Authorization: Bearer <key>, the key asked of keys for each request, so a key rotated by a secret manager is sent without rebuilding the client (#2313). A current() that throws fails the request with an AuthenticationError naming the exception's class.