Как управлять доступом, привлекая внимание итальянцев

https://github.com/rescrv/libmacaroons

macaroons can limit when, where, and by whom the delegated authority can be exercised (e.g., within one minute, from a machine that holds a certain key, or by a certain logged-in user), by using attenuation and third-party caveats.