Within computer systems, two of many security models capable of enforcing privilege separation are access control lists (ACLs) and capability-based security. When is an ACL most secure