Perform some integrity checking in bw auth fetches

We currently do not perform any certificate validation or length checking for the bw auths. We should do one or the other, or both.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information