For example, FIG. 7(a) shows a system 700 wherein a policy evaluation and enforcement module 704, which may include components such as are described with respect to FIG. 6, is configured to receive requests for a resource 702 from a requestor 706, such as a user, third party, application, or other module.