CDAP-658 common-authorization: authorization service and client

Why is this needed?  It doesn't add anything to the Supplier interface...