Notes:
principal = user, machine, server process, printer, file, …
CDS has structure like directory tree, each leaf corresponds to principal with attributes
deap impact on OS, hevy on system administration, easy for users and programmers
