[WFLY-490] Basic permission and constraint classes
[WFLY-490] Rename ContraintDefinition to AccessConstraintDefinition
[WFLY-490] Use Authorizer in OperationContextImpl
[WFLY-490] Get basic perm checks working
[WFLY-490] Help ensure process lifecycle ops require write-runtime perms
[WFLY-490] Fix constraints; annotate a couple things as sensitive
[WFLY-490] Temp hack for reading operation-headers from HTTP GET
[WFLY-490] Add AccessConstraintDefinitions to attribute and operation definition and builders
[WFLY-490] Configure the sensitivity constraints, vault expressions sensitivity and application types
[WFLY-490] Basic filtered read-resource support
[WFLY-490] Don't expose addresses via wildcard requests
[WFLY-490] Better read attribute enforcement
[WFLY-490] Fix resource filtering reporting with recursive reads
[WFLY-490] write-attribute enforcement
[WFLY-490] added a bunch of TODOs at questionable places in the code
[WFLY-490] added the first set of test cases

Tests using multiple roles are currently @Ignored, as the feature is broken.