Responsibility-Bound Access Logic