1Namespaces are specified by a trailing colon: ''some:namespace:'' \\ 2Groups are specified with a leading at-character: ''@group'' - multiple users and groups can be specified comma separated 3