Need trace logging of

1) Role mapping decisions
2) Constraint violations
3) Permission failures

Darran already did the role mapping stuff for at least the main rbac mapper; I need to double check the simple mapper and the RunAsRoleMapper. Most of the constraint violation stuff is done as well; perhaps all.