> How do you still make sure Alice doesn't delete the doc within the 5 seconds after her permission to do so was removed? make a fully consistent check for such sensitive operations if that is a concern