Space credentials are bound to a key. The amended proposal 0016 makes a credential carry a proof rather than travel as a bearer token, so a host handed one so it could serve its own repository can no longer replay it against every other repository in the space. Subscribing to a space moved to the new scheme in the same change that adopted it, so nothing was ever served by the old one.