That would be a token system like oauth2 - but who's the central auth provider in a decentralized system. Could extend the relays to act as witnesses.