add to ACF that there be an overview description of access control system

[jeffblank]

to satisfy atsec comment. it is reasonable to provide e.g.: https://msdn.microsoft.com/en-us/library/windows/desktop/aa374860%28v=vs.85%29.aspx

[jeffblank]

i will augment the assurance activity

[jeffblank]

AA now augmented, using the original text.