Access-Control Policies via Belnap Logic: Effective and Efficient Composition and Analysis