Scarce objects -- bearer certificates for usage control