A logic for SDSI's linked local name spaces: preliminary version | Synapse