Enforcement at Initiation
WHAT IF a client attempts an action that is denied?
Only the Initiating server handles the denied request. All other servers have no involvement.
Enforcement at reception requires coordinated decision making and increases load on all servers