Use QueryResultsCache to avoid continually looking up the ApplicationUser for the current user name in the tenanted authorization facet.