Take Atlas and Proxy bearer tokens

Enrolment now accepts signed bearer tokens for Atlas and Proxy instead of key/secret pairs, enabling token-based auth.