One-time capabilities for authorizations without trust