Add a test for AclAuthorizationStrategyImpl.securityCheck when a custom authority is used. Issue gh-4085