ACL REWRITE Zanzibar: Google’s Consistent, Global Authorization System: https://research.google/pubs/pub48190/