Types as Specifications of Access Policies