A user study of policy creation in a flexible access-control system