The BLP model imposes the ss?property and the *?property on every element of b, but does not explicitly state that every entry in M must satisfy the ss?property and the *?property. a) Explain why it is not strictly necessary to impose the two properties on M: b) In practice, would you expect a secure design or implementation to impose the two properties on M? Explain