It's really key to see users as users, and services as services, with constrained delegation being used when services represent users. That way everything is auditable, the user stays in control, and the service's liability is minimized.
Read More...