Provides indirection between ACL packages and security identities, such as principals and GrantedAuthority[]s.