Changes to Whether tablet push is on for the clinic (and its VAPID public key), and whether the browser's current endpoint — sent in the body, never the URL, so it stays out of access logs — is this tablet's.