NXCM-5448: add memory-sensitive cache to XML permissions resolver