Restricting applications OAdmin can give access to

When inviting or editing a user, an Organisation Administrator
can only see Applications listed that have their "signin"
permission's "delegable" flag set to true.