maybe just call this `delegatable`? The fact that using the `signin` permission to determine whether an application is delegable or not is an implementation detail, IMHO...