https://123dok.net/document/zx5xe3dw-monotonic-logics-access-control-delegation-revocation-distributed-policies.html