I think this should say "`mix:accessControllable`". And this isn't a standard mixin, right? So should this be `mode:accessControllable`? And does a client have to manually add this mixin, or can they bind an access control policy to a node (and if so does ModeShape add this mixin to the node)?

Sorry to be so particular about this, but this is likely something that users will read, so it's important that it is accurate.