Integrate the ACL engine with the AS security framework

Make the ACL providers accessible to the AS. Applications must be able to invoke the configured providers to enforce instance-based authorization and also query the privileges that have been entitled to a particular identity.