Merge pull request #1750 from entireio/fix/1036-headless-login-hint

fix(login): headless keyring hint, real-backend provenance, loose-permissions warning