An organization is designing a network architecture that must meet the following requirements: - Users will only be able to access predefined services. - Each user will have a unique allow list defined for access. - The system will construct one-to-one subject/object access paths dynamically. Which of the following architectural designs should the organization use to meet these requirements?