Mark S. Miller Bill Tulloh Jonathan S. Shapiro The Structure of Authority: Why Security Is Not a Separable Concern. 2-20 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=3389&spage=2 2004 conf/moz/2004 MOZ db/conf/moz/moz2004.html#MillerTS04