[mikewarot]

How does using this allow the user at run-time to specify that a task should only have read access to X and dynamically give write access to fu.bar?