Navigating the AI access control minefield