What does attenuation refer to in an authentication context? From the word I would guess it would be something like being able to make another token with fewer

What does attenuation refer to in an authentication context? From the word I would guess it would be something like being able to make another token with fewer rights/less access from a more powerful token without involving the issuer. Edit: Seems my guess was right: > But it does a lot more! It supports offline attenuation (like Macaroons): from a Biscuit token, you can create a new one with more restrictions, without communicating with the service that created the token.