The following pages link to File:Service separation and delegation with signed tokens scoped to services.png: