Application-Defined Decentralized Access Control