NUT21 & NUT22 are the best approach to authentication that I have ever seen. 
Discussion
changing your mind: BATs are not covered with DLEQs so you have no guarantee the mint is not tagging you.
Good point. I see no reason why we shouldn’t extend the AuthProofs mint endpoint with DLEQ capabilities. Am I missing something?
No it should work the same.
They are
Don't see it anywhere in the NUT
How about #shoeonhead though?