Biscuit: Pubkey signed token with offline attenuation and Datalog authz policies

clever-cloud.com