multi-NS secure delegation