auth retries

[flihp]

I've wallpapered over our lack of retry logic in oks with some bash in scripts/_ceremony. This should be solved in oks directly.

[flihp]

this will be easier if we solve #303 first