A Financial Institution's Legacy Mainframe Access Control System in Light of the Proposed NIST RBAC Standard