Component-Based Access Control: Secure Software Composition through Static Analysis