Access control is one of the fundamental paradigms of the Internet, yet across the Internet every identity/role verification is based on indirect mechanisms, which practically kneecaps our security capabilities. Security becomes hard to the point of impractical not because we are not doing enough, but because the ...