Code review comment for lp:~chipaca/snappy/auth

re gc: probably not possible without major work, as the password will be clear(ish) in the http request headers.

If that's a concern, we should switch to digest auth.