Major Description
in order not to search for effective access control content upon
permission evaluation, any changes to access control content should
lead to an update of the persisted compiled permissions for each
principal that are planned to be stored in a separate structure underneath jcr:system/rep:permissions/<workspaceName>.
the (empty) commit hook can be found at org.apache.jackrabbit.oak.security.authorization.AccessControlHook
which is already pushed to the list of commit hooks upon repo-setup.