Hierarchical Domains for Decentralized Administration of Spatially-Aware RBAC Systems