https://5dok.net/document/eqo5n5ky-attribute-based-access-control-for-distributed-systems.html