static GRANT: Mutex<Option<Grant>>
The sign-in’s grant, between the sign-in and the join: in memory only (zeroed when dropped), its app password in the keyring besides.