Notes on delegated authentication