update to jdk7
make scope AutoCloseable
getter for testing
add simple securing tests
move access decisions to 'SecurityDecisionMaker'
special role-access test/example