Draft: Notes about RPC connection strings and authentication

On IRC I said I wanted to talk about RPC authentication and connection strings, apropos !2388 (closed).

This is a bunch of words I wrote, including some proposals for how to proceed, which I think @nickm and I will want to talk about. I'm making this as an MR just to have somewhere to put it. We may want to c&p into a pad.