AccessFilter improvements

I noticed that AccessFilter was doing a string concatenation, WildcardProps lookup, and parsing boolean strings on every request.

This patch computes two immutable hash sets during construction, using those to verify namespaces which are not validated or allow deletes. The props instance can safely be forgotten.

Tests pass, but please verify!