provisionDelegate mints the pair of service-auth tokens the gate requires and maps its error codes to messages the creation form can show. listDelegatedAccounts lets remote controllers enumerate the accounts they own directly against Tranquil.