The payment authorization pattern: giving an agent a wallet without giving it your bank account