TEIID-3051 ensuring grant all is not fully transitive
TEIID-3054 added support for negation, some cleanup and adding tracing to show which type of searching is being used