Squashing all commits into this one (from https://github.com/coreos/etcd/pull/357). Thanks,
security
auth
etcdhttp will check the cluster version and update its capability version periodically. Any new handler's after 2.0 needs to wrap by capability handler to ensure it is not accessable until rolling upgrade finished.