yet another patch that will allow us to try further improvements later on: the patch adds complete separation of entries used for permission eval from ACEs exposed on the JCR API level. consequently i had to rewrite the retrieval of effective policies (that were using the entry collector as well). in addition i had to remove the EntryCollectorTest#testIsCached as they were relying on the effective policies actually exposing the entries in the cache. this is no longer the case for the reason above.
this patch most probably doesn't add a major performance gain itself, but it really reduces the entries stored in the cache to the information required for permission-eval omitting all additional stuff that is used for JCR API compliance. in addition it would allow us try if it was beneficial to use multiple sessions to collect the entries.