Shared-java: Support for restricted services.

[scblack321]

Add support for restricted services. The design is a WIP.

Note that this may not involve updates to the JWT filter code. Most likely each service will need to do the checks because the checks will probably involve calls to SK to check permissions and we want to minimize calls to SK.

This issue for the development of common methods that services can call.