target restrictions
Restrictions on the targets to whom a client's delegated identity can be projected.