- path module: use pkg_resources (if feasible, given ZCML)

- audit use of "functools.wraps" (pickling no longer required)

- Docs: add interface docs for IAuthenticationPolicy and
  IAuthorizationPolicy, so people who care might be able to write
  their own.