Spring Security ACL with Spring Data REST