Leverage
Distributed security before local security
Enabled by Principle of Least Privilege
Programming model independence
Security model is one with reference model
No centrally administered namespace
Reference namespace = authority namespace