Ravi S. Sandhu Undecidability of Safety for the Schematic Protection Model with Cyclic Creates. 141-159 1992 44 J. Comput. Syst. Sci. 1 db/journals/jcss/jcss44.html#Sandhu92