CDAP-658 common-authorization: authorization service and client

I was considering adding a field for `namespace` here, but then users of this library would be forced to use namespace. However, this sort of reasoning also sort of applies to `type`. So, I'm not sure what is best to do here.