broke out XACML-GEN to a profile driven rewrite of src/main/java because the AT&T firewall is blocking lots of things