Towards specs for access control