The STAPL policy language for tree-structured, attribute-based access control policies