I wonder what you think so far. In particular, I liked the tuple-calculus they define; it can be extended to support just about any permission I can think of (

I wonder what you think so far. In particular, I liked the tuple-calculus they define; it can be extended to support just about any permission I can think of (although it does require reversing DNS names, which is slightly ugly). I have a scheme to release a v2.0 of the standard someday in my copious free time.