Cloud based elasticity lets us build apps that are supposed to scale to arbitrary numbers of users. Alas, even though these apps may scale their horsepower seamlessly, they use traditional access control models that do not scale. IT teams end up being large, expensive, and still unresponsive. Why not crowdsource access control to the users themselves?