Range-diff !514

back to !514 Follow-ups review fixes: LFS key pin, mirror numeric hosts, visibility re-auth, docs