Decides how to answer one authenticated request.
needs only the method
the durable counter, or null when it has not been read yet
Optional
carries PLAN and the overrides
PLAN
injectable so the UTC-day rollover is testable
Decides how to answer one authenticated request.