Visible to the public Access Control Policy Evolution: An Empirical Study (slides)