Xtrm security: Approval policies, granular control, entity segregation