Consent-based user impersonation flow (start, exit, status, consent)