Every credential the Hub has issued. Hashes, never tokens.
Future<List<Grant>> grants() async => _list(await get('/grants'), Grant.fromJson);