The Abacus: A New Approach to Authorization