Make access control flags more granular