AccessPolicyBuilder

Builds an AccessPolicy. Nothing is granted by omission: a policy gives what may be read and what may be changed, read and write, or readWrite for both at once; one without a write predicate is refused, and write { denyAll() } makes a read-only aggregate explicit.