Access Control with a Privileged Block