+ access list and run-time configuration of some things