Towards an Algebra for Security Policies (Extended Abstract)