B. Kosinski
RFC3520: Session Authorization Policy Element.