One-time authorization for off-line interactions