Introduce an AdvancedCache.as(Subject) method for explicit authorization

Currently the subject is extracted either from the AccessControlContext or from the lightweight security implementation (which uses a ThreadLocal).
Both of these approaches have fairly high costs, so we should, if possible, use an explicit Subject.