Jeff Polakow Christian Skalka Specifying distributed trust management in LolliMon. 37-46 2006 PLAS http://doi.acm.org/10.1145/1134744.1134753 conf/pldi/2006plas db/conf/pldi/plas2006.html#PolakowS06