security; non-interference; authorized declassi- fication; epistemic logic