intended to enforce the boundaries of a control sphere, i.e., protect the product (or
other actors) from attack.
CONTROL SPHERE: a (possibly empty) set of resources and behaviors that are accessible to a
single actor, or a group of actors that all share the same security restrictions. For example, a