Towards a behavioural theory of access and mobility control in distributed systems