A Mediated Access Control Infrastructure for Dynamic Service Selection