https://9dok.net/document/zwv8l1e0-formal-definitions-usable-access-control-rule-goals-metrics.html