> A permissively regulated attribute CANNOT be modified, and a > permissively regulated action CANNOT be performed, except by an > instrument with power at least as great as that of the rule > defining that attribute or action as permissively regulated.
How about: A secured attribute CANNOT be modified, and a secured action CANNOT be performed, except by an instrument with power at least as great as that attribute's or action's security level. If a rule specifies that an attribute or action is secured, but does not list the security level of that attribute or action, then the security level defaults to the power of that rule.
