192 /* externalize access rights */