Access control in the new normal