Decentralized Regulation of Distributed Systems: Beyond Access Control