I'm very concerned about `ExecutionContext` having a reference to the `JcrSession` (which contains a reference to the `ExecutionContext`). This new code constructs new `ExecutionContext` instances _a lot_, every time the access control manager needs to perform each operation.