[Extensions] Audit Logging: Log when permissions have been granted/revoked and on privilege evaluation

[cwperks]

Authorization in the REST layer needs to keep a log of requests that have been permitted and blocked, similar to how its logged for authorization in the Transport layer inside SecurityFilter.

In order for this issue to be addressed, changes will need to be made to the Security plugin so that when authorization on the REST layer occurs, the specific permissions granted to the subject are reported in the audit log.

Resolves:

• As a cluster admin, I have record of when permissions granted/revoked

Details can be found in this PR: #2753

[stephen-crawford]

[Triage] This is part of the ongoing work for the Extensions project.

[peternied]

Looks like #3099 was a duplicate filing for the same kind of issue