olemus
NIST SP 800-63-3:
mandaat, mille seost kasutajaga saab tühistamata muuta
= credentials that are bound to a subscriber in a manner than can be modified without invalidating the credential