> If a customer might be a criminal, we put ACLs on him. > The customer is then checked and if he's a criminal, we just leave the ACLs as-is. > Otherwise, we just remove ACLs so that he can use the application again. this is equivalent to the

banned

concept above