Modelling and verifying dynamic access control policies using knowledge-based model checking