Clarify the format of third-party invites, including the fact that identity
server public keys can be encoded using standard or URL-safe base64.