AFP548 has a great tutorial up on getting started with Mandatory Access Controls (the other MAC acronym). The API isn’t stable yet, but it’s worth learning about early.