Conflict checking of separation of duty constraints in RBAC - implementation experiences