Description of delegation support in Win AD (thanks Rob Sessink)