AccessControl new supports URIs