Difference between a controller and a custodian for a cycles wallet?

“dfx canister” command has these options, but what is the difference?

I couldn’t find an answer here Use the default cycles wallet :: Internet Computer but perhaps someone on the appropriate team could shed some light on the difference.

Not sure if dfx canister has these options, maybe youre thinking of dfx wallet
A Controller is the most privileged role, and can rename the wallet, add entries to the address book, add/remove controllers, authorize/deauthorize custodians. A Custodian can access the wallet information, send cycles, forward calls, and create canisters.