Within computer systems, two of many security models capable of enforcing privilege separation are access control lists (ACLs) and capability-based security. What must designers of systems that are ACL based do