Using uniform namespaces of form
These do not have to reflect exact Java package names nor module names, but should rather capture coarse grained structure along with easy readable semantics.
Namespaces are allowed to span multiple modules.
Namespaces should also rather be lowercase to avoid ambiguity.
Why is this relevant? Because SecMan was reworked to now base its permission model on namespaces. Which also includes wildcard support.