Vouch for a scheduled job

An owner or admin can now vouch for a job on its page in the console. Each run's identity token then names the job, its version, who made it and who vouched for it, so your own API can accept a job's call only when a person stood behind exactly what it runs. Any change to the job takes the vouch off. See identity tokens.