Biscuit: Pubkey signed token with offline attenuation and Datalog authz policies | Dark Hacker News