AclPermissionEvaluator has long been the de facto standard for evaluating ACLs. This ticket removes implementations of AfterInvocationProvider and AccessDecisionVoter that duplicate this.