10 4 the main paradigm is that only the servers in a complete quorum can collectively grant or revoke access permission