deposit.auth: Namespace cache keys per realm, client_id and user_id

The cache may [1] or may not [2] be shared with other applications. So best avoiding
clash altogether.

[1] moma has both the deposit and the webapp which both *will* use the same cache

[2] deposit and webapp in staging are standalone apps so no sharing there.

Related to T3166