Statistics for Secrecy Resilience of Authorization Policies and Its Application to Role Mining