Capability File Names: Separating Authorisation From User Management in an Internet File System. - Jude T. Regan; Christian Damsgaard Jensen (USENIX Security Symposium, 2001)