A plain old access control list