A new Pentagon memo outlines approved non-CAC authentication tools and sets boundaries for accessing DOW systems without PKI.