NATS 2.10 has a new Auth Callout extension for delegating
AuthN/AuthZ to an application-defined NATS service. NATS communicates with this service over … NATS, of course.
This should make it much easier to programmatically control accounts without having to mess with a configuration file, etc.
cc @bminer