ISPN-3909 Cache Access Authorization

https://issues.jboss.org/browse/ISPN-3909

For initial review.
What's missing: 
- container-level security (only obtaining a cache is checked)
- impersonation ( .as(Subject))
- declarative configuration parser (waiting on Galderz' new parser)