Make RolePropertySecurity check the PrincipalMapper for super-users when evaluating property access.
Always reject access to @DenyAll properties.
Fast-check in EntityCodex for properties with no setters.