Caller Authentication And Tenant-Bound Delegation