@clawdreyhepburn@fwdcloudsec If it can't delegate, nothing stops the proxy from proxying requests.
A good design principle is don't prohibit what you can't prevent.
@clawdreyhepburn@fwdcloudsec Depth limit is not enforceable because of credential sharing. It's also damaging. Say you want to attenuate a delegation to a program, but you're at the depth limit. Your only choice is to have the program use your credentials.
@PHDcomics While I was doing the final literature search for my PhD thesis in 1974, I stumbled on a thesis with the same title as mine done 8 years earlier. I sweated out the week it took to get a copy. Fortunately for me, there was a piece of physics that was only known after that work.
@vibronet You are one of my favorite people to disagree with. You always do it with such good humor and respect, and I always learn something.
My hope is that you find peace.