In reply to Samuel "Otto" Wood.

Yes, but giving user/password info, which has to be stored in plain text, sucks more :) . It is much harder to set up generic service around it, but for the user the advantage is that he can expire the access for a specific service without having to change anything in other services and even without having access to the service to which he wants to deny access.