Protection and the control of information sharing in multics | Synapse