meaningfully delegate a subset of available privileges, so that the
delegate is permitted to invoke only a restricted set of operations.