In a 3rd step, the proxy asks the API for C. The API checks if B has the rights to employ C then forwards C towards the proxy. Google's Macaroons in 5 Minutes or fewer - If I am specified a Macaroon that authorizes me to carry out some motion(s) below selected constraints, I'm able to non-interactively establish a 2nd Macaroon with stricter constr