const DISABLED_SCHEMES: &[(&str, &str)];Expand description
Schemes present names and refuses with 403 SchemeDisabled, so a
client presenting one is told “not enabled” rather than “not a scheme”.
DPoP is the OAuth access token scheme atproto specifies. The routes
that take it read it off the headers through dpop_bearer instead of
through present, so every route that resolves its credential here
refuses it.
ServiceAuth is refused on every route, and names no token this server
issues: the tokens com.atproto.server.getServiceAuth mints are
presented to other services as Bearer.