Clear terms · bounded access · revocable authority