Hamer, L-N., Gage, B., Kosinski, B., and H. Shieh, "Session Authorization Policy Element", RFC 3520, DOI 10.17487/RFC3520, April 2003, <https://www.rfc-editor.org/info/rfc3520>.