Please see MeatBall:SoftSecurity for most of this idea.
I saw an interesting quote today that I think explains the basic idea of SoftSecurity in conventional language:
"The basic thing I think makes it work is turning from a model of permissions to a model of accountability" – Jimbo Wales