Add encryption-based access control

[dbosk]

The current treatment focuses on an active entity being the reference monitor. However, we can achieve a logical reference monitor through cryptography. We should present this view too.