Issues scoped capability grants for an existing Dialup session process.

The returned endpoint is a bearer capability. Keep capabilities narrow and use a short :expires_in for delegated agents.