anchor.diff:  ----
   <1> This provider name is prefixed to the Google numeric user ID to form an
   identity name. It is also used to build the redirect URL.
  -<2> `*GoogleIdentityProvider*` cannot be used to send `WWW-Authenticate`
  +<2> *GoogleIdentityProvider* cannot be used to send `WWW-Authenticate`
   challenges.
  -<3> When `true`, unauthenticated token requests from web clients (like the web
  +<3> When *true*, unauthenticated token requests from web clients (like the web
   console) are redirected to Google to log in.
   <4> The client ID of a link:https://console.developers.google.com/[registered
   Google project]. The project must be configured with a redirect URI of
  -`_<master>_/oauth2callback/_<identityProviderName>_`.
  +`<master>/oauth2callback/<identityProviderName>`.
   <5> The client secret issued by Google.
   <6> Optional
   link:https://developers.google.com/identity/protocols/OpenIDConnect#hd-param[hosted
  
positive.code: ----
  <1> This provider name is prefixed to the user name in the request header to
  form an identity name.
  <2> `*RequestHeaderIdentityProvider*` cannot be used to send `WWW-Authenticate`
  challenges.
  <3> `*RequestHeaderIdentityProvider*` cannot be used to back a login page.
  <4> Optional: PEM-encoded certificate bundle. If set, a valid client certificate
  must be presented and validated against the certificate authorities in the
  specified file before the request headers are checked for user names.
  
negative.code: 
  To create the file, run:
  
  ----
  $ htpasswd -c </path/to/users.htpasswd> <user_name>
  ----
  
  To add or update a login to the file, run:
  
  ----
  $ htpasswd </path/to/users.htpasswd> <user_name>
  ----
  
  To remove a login from the file, run:
  
  ----
  $ htpasswd </path/to/users.htpasswd> -D <user_name>
  ----
  
  .Master Configuration Using *HTPasswdPasswordIdentityProvider*
  ====
  
  ----
  