Update: add access control mgt support for jcr2spi

and also the current-user-privilege-set