rest: add/remove pis to/from authority