Comment by geoctl

I don't think the point here is to fully replace deterministic with non-deterministic-based access control. The point is to combine the traditional manual/coarse-grained deterministic access control with an additional layer of dynamic, fine-grained non-deterministic access control.