Text this: Modelling and verifying dynamic access control policies in workflow-based healthcare systems