secure by default

A security model that assumes that a user does not have permission to execute an object unless there is a specific record indicating such permissions.