this is really powerful stuff when working with a CISO “the data itself defines who may access it”