templates), are also becoming increasingly typical in secure systems. A common
cause of security protocol failure is a changing environment. Environment
changes often result in the invalidation of at least some of the system’s underlying
assumptions about that environment; such changes can make it impossible for a