Subscriptions might be another form of delegated access. There are ways to implement this that is completely invisible to the subscription provider and which you can unilaterally cancel. Dang, another cool project!