Handle empty or null lists being sent in to the SecurityInterceptor.
Allow calls to /owners/{owner_key}/consumers to accept a list of consumer UUIDs.