[WFLY-490] / [WFLY-1977] Make CombinationPolicy configurable
[WFLY-490] / [WFLY-1980] Properly apply the ACCESS_CONTROL sensitivity classification