CDAP-658 common-authorization: authorization service and client

You can use a Guava SetMultimap here to simplify this