It's the worst delegated authorisation system except for all the others that have been tried from time to time.