abao should understand security schemes

As part of our API, we have a security scheme we use for some endpoints. Since abao doesn't know about those security schemes, it doesn't have a way of testing them.

I've got a solution I'll make a pull request for shortly which basically appends the name of the security scheme to the route to differentiate it.

The issue does not name files, tests, or an entry point. Start by tracing how abao reads RAML security schemes and turns routes into tests, then verify that endpoints using different schemes are distinguished and testable.

Written by the indexing model from the issue text.