clean up xenserver resource code
SecurityChecker can accept multiple ControlledEntity
Adding SecurityChecker list for the ParamProcessWorker
Split the Root Admin policy to allow 'ListEntry' access for listing resources for scope 'all', but 'UseEntry' access only within Account scope

Same with Domain Admin policy
Remove usage of sameOwner checkAccess invocation, and convert to
OperateEntry IAM check.