KNL-1250 reverse merge of r309889


git-svn-id: https://source.sakaiproject.org/svn/kernel/trunk@310332 66ffb92e-73f9-0310-93c1-f5514f145a0a
KNL-1270 set authz.synchWithContainingRealm=false because of issues found in KNL1250


git-svn-id: https://source.sakaiproject.org/svn/kernel/trunk@310333 66ffb92e-73f9-0310-93c1-f5514f145a0a