Fix initialization order problem with EntityDescription setup vs. EntityCodex.describe().
Add SecurityTarget.matches() utility method.