The means of authentication needs to be bound into the 0RTT handshake

[martinthomson]

Maybe it could be encased in another extension.

[martinthomson]

I took a look at this and couldn't work out why it was necessary. Question sent to those who suggested it.