Mixing delegated and application permissions (the on-behalf-of flow) - Microsoft identity platform