Do we *really* want a hard coded access control list in here? Would rather an undo or some logging/alerting going on. We all work for the same company and should trust each other.