2a0e450c53
Client signs domain|timestamp|token with private key (distributed via monitor plugin manifest). Base verifies with public key in component config. Replaces shared secret and key ring approaches — no rotation needed. Includes 5-minute timestamp window for replay protection.