Added AccessControl policy

This change adds another policy: one for access control statements
that dictate which actions are permitted in which states of the cloud.

It also adds a top-level entry point to the Runtime so that
external components may make access control requests.

Change-Id: I950875631e26fda7ca2b506f5139aed2fd9a1e6e
Merge "Added AccessControl policy"