Towards a behavioural theory of access and mobility control in distributed systems (extended abstract)