Discussed this a bit with michaelneale via Google Hangouts yesterday, but an instance will need to initiate a registration process with the Evergreen hosted services layer to create a cryptographic key for use with future requests.

Basically we need to ensure that the information we're receiving from the instance over time can be trusted to come from that instance.