Build safer sign-in flows with PKCE protection.
Recent revisions are kept. Restoring one creates a new revision.
