voxpelliit's basically just telling Alice that the service that owns the callback that's being sent in is allowed to fetch it for Bob and Bob has verified that with a rel-delegate just like Micropub and WebMention uses rel:s to verify delegation today
