Allow action delegation

[Shadowfiend]

For example, say an ops person wants to initiate the onboarding of a given user. They might issue commands to create a user's G Suite account and add them to the right GitHub teams. They may not have permissions to do all of these things however.

In this case we would want to buffer up the actions until someone with permissions can authorize the actions, at which time they will be performed with that person's credentials.