Visible to the public Policy DSL: High-level Specifications of Information Flows for Security Policies