Authentication, access control, and audit