EDIT: the last sentence refers to the context of authorization systems. Not completely in general.