Enh #3168 rbac cache

Proposal for #3168: rbac cache

I am really sure about this one - it looks a little ugly.