offhand, I haven't thought of a service for which the consent of both parties should be required.
However, it's not yet clear whether we've consensus that such services have to be authorized by BOTH or by EITHER ONE of the end-points.