[WFLY-490] Cut back on the sorting
[WFLY-490] Cache AccessConstraintDefinitions
[WFLY-490] Cache the user permissions by role set; cut out some per-request factory collection copying
[WFLY-490] / [WFLY-1965] Upgrade to Remoting JMX 2.0.0.CR1

Also a minor update to only set the CallbackHandler if username/password authentication is actually required as this disabled the local authentication mechanism.
[WFLY-490] / [WFLY-1943] Allow the RunAs role mapping capability even where real role mapping is enabled.

In this case only users with the SuperUser role can request a mapping and even then the roles requested MUST exist.
[WFLY-490] added tests for permissions coverage and role mapping (based on properties file)
[WFLY-1907] / [WFLY-490] The whoami operation needed the reply type setting so that it would be represented correctly in the JMX facade.
[WFLY-490] Redo the relationship between Authorizer and the configuration

Introduce an AuthorizerConfiguration interface to encapsulate all configuration state from the management API.

Use that for accessing configuration state in DefaultPermissionFactory and the role mappers.

Provide a writable implementation to the various OSHs responsible for handling management ops.

Formalize support for the is-caller-in-role op.

Remove the ConfigurableAuthorizer interface; move API up to Authorizer.

Flesh out how a custom Authorizer would integrate; added CustomAuthorizer interface.
[WFLY-490] added the permissions coverage test for domain
[WFLY-1864] / [WFLY-490] Add additional dependency required for handling of messages early in the initialisation of the host controller.
[WFLY-490] Move the controller module RBAC mgmt API classes into one package
[WFLY-490] [WFLY-1985] tests for read-attribute leaking sensitive data
[WFLY-490] [WFLY-1985] fix for read-attribute leaking sensitive data