XACML: ongoing work