Central authorization service

A site-central service for granting authorization to users. This lifts the need to do authorization on a local level while securing consistent decisions across all services, such as pool account mappings and user banning; this is especially important for gLExec on worker nodes.