PLAY-111 Optimize AccessControlEntry storage layout
This commit smashes separate allow/deny DomainActionEntry collections into single json serialized fields on AccessControlEntry, thus dramatically reducing the number of total db records and avoiding extra JOIN queries.
Closes PLAY-111