Verifying Access Controls and Shadow Use