first stab at caching access control lookup result