Database-backed accessOpaque sessions · per-user grants · branch boundaries