An application indicates that it wants to delegate credentials when it calls the gss_init_sec_context( ) routine and sets the GSS_C_DELEG_FLAG flag to TRUE. Notes added to the initiator's login context can indicate the type of delegation used and any restrictions in effect (for traced delegation only). If no delegation notes are included with the login context and the GSS_C_DELEG_FLAG flag is set, impersonation delegation is used.