Relating Declarative Semantics and Usability in Access Control