Access control meets public key infrastructure, or: assigning roles to strangersAmir HerzbergY. Masset al.2000S&P 2000