Text this: From model-driven specification to design-level set-based analysis of XACML policies