Shekhar Jha, a security architect at Sena Systems, was talking with me about roles, and asked “What I am trying to understand is whether roles as we understand it today (i.e. NIST roles) is enough for ...