Support for parametric privileged actions

Would move the parametric action classes out of Elytron.  In the normal case, one less allocation is required per privileged action, however there is a one-time per-caller overhead.