Title: Separability and security models