A baseline RC/AUTH policy for RSBAC