Within computer systems, two of many security models capable of enforcing privilege separation are access control lists (ACLs) and capability-based security. What prevents ACLs from giving access to only one person?