Meta server: make re-delegation, i.e. setting token's allow delegation flag configurable, so that the meta server can veto client's re-delegation request.