auth-id selection logic cleanup

[flihp]

The current OKS implementation tries to guess what the auth-id should be. In retrospect this was a bad idea. In reality we've been executing ceremonies as a few pre-canned oks commands in a script named ceremony. This allows us to make all choices w/r/t the auth-id used by each command. This makes the guesses we do in OKS largely useless and generally bad for the code (complexity). This should all be stripped out and replaced with a simple default.