pub fn delegate(
parent: &CapabilityChain,
sub: Capability,
delegator: &Identity,
) -> AccessResult<CapabilityChain>Expand description
Extend parent by delegating sub, signed by delegator. The narrowing and
depth constraints are enforced at authorization time
(authorize_chain); this just signs and appends, so
callers should build sub with issuer = delegator.did() and a scope/ops/
expiry within the parent.