I'd avoid calling it the `target`. It's more the permissions that are either granted or denied to the identity, trustee, account, subject, etc depending on your naming preference.