Mutable cache authorization

Currently, the list of allowed roles for a cache is immutable. We should make it mutable so the list of roles can be modified at runtime.