A simulator for evaluating the trust- and risk-aware access control concept