KNOX-270: service level authorization should return 403 on deny
Merge remote branch 'origin/apache-ref/master' into baikal-GA-0.4.0