Make the interface clear and informative

• Ensure that the interface does what it says it does. If the expected abilities of the interface and the actual abilities don't match up, how can we expect users to make appropriate choices?

• The effects of any security-relevant action should be explained to the user before the action is taken. The interface also needs to help the user find actions that suit his or her goals.

• It should be easy for the user to tell what access has been granted and to whom.