Always remember that authentication and authorization are different things. Many more entities might be able to authenticate than are authorized to take any particular action.
-- Jordan Brown, Oracle ZFS Storage Appliance, Oracle Solaris