The Achilles’ heel
Creating a policy at a fine-grained level is non-trivial
Security policy creation and management will be done by overworked system administrators
- many sys admins don’t know about security
If users do it, they will make mistakes
- dancing pigs all over again