Probably rpc-multistream should bind the rpc functions to some object such that this refers to an object with relevant info from within the rpc functions.
rpc-multiauth should then add a .auth or .user to that object so rpc functions can access the current user using e.g. this.user.
Until then we have to enable opts.userDataAsFirstArgument.