The three-party identity problem in MCP servers | Dark Hacker News