Access control context interceptors

These will be needed for security manager operation.  Also we make InvocationContext implement PrivilegedExceptionAction to reduce per-invocation overhead a bit.