refactor.  move filterAccessRequirements to a new shared util class