Who is responsible for defining the legitimacy of an authority?