Immutable source authority for an explicitly selected protected MCP session. This is acquisition authorization, not authorization of previously stored context.