Composing application models and security models: On the value of aspect-oriented technologies