my first response is that it's a lot easier to model things in ReBAC in an additive way than a subtractive way